Falhas do tipo CWE-78
4.603 resultadosInjeção de comando do sistema operacional
A aplicação constrói comandos do SO usando dados de entrada do usuário sem sanitização adequada, permitindo que um atacante injete comandos adicionais. Quando o comando é executado, instruções maliciosas do atacante rodam com os privilégios da aplicação, comprometendo o servidor.
Exemplo
Um script PHP que executa `system('ping ' . $_GET['host'])` sem validar o parâmetro. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.
Como mitigar
Sempre valide e sanitize entrada de usuário; prefira APIs seguras (como funções que aceitam argumentos separados em vez de strings de comando); execute com menor privilégio necessário; use listas brancas de valores permitidos quando possível.
CVE-2022-45996HIGHTenda W20E V16.01.0.6(3392) is vulnerable to Command injection via cmd_get_ping_output.EPSS 2.3%CVE-2020-15271CRITICALShell Command Execution in lookatmeEPSS 2.3%CVE-2021-32530CRITICALQSAN XEVO - Command Injection Following via Array functionEPSS 2.3%CVE-2018-13284HIGHCommand injection vulnerability in ftpd in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenticated users to executEPSS 2.3%CVE-2025-29042CRITICALAn issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the macaddr key value to the function 0x42232cEPSS 2.3%CVE-2025-6102HIGHWifi-soft UniBox Controller logout.php os command injectionEPSS 2.3%CVE-2025-66261CRITICALUnauthenticated OS Command Injection (restore_settings.php)EPSS 2.3%CVE-2025-66253CRITICALUnauthenticated OS Command Injection (start_upgrade.php)EPSS 2.3%CVE-2023-1350MEDIUMliferea Feed Enrichment update.c update_job_run os command injectionEPSS 2.3%CVE-2024-50388CRITICALHBS 3 Hybrid Backup SyncEPSS 2.3%CVE-2025-34312HIGHIPFire < v2.29 Command Injection via URL Filter BlacklistEPSS 2.3%CVE-2017-9274HIGHosc executes spec code during "osc commit"EPSS 2.3%CVE-2024-41317HIGHTOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_eEPSS 2.3%CVE-2022-46598CRITICALTRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the wps_sta_enrollee_pin parameter in the action sEPSS 2.3%CVE-2022-46597CRITICALTRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the sys_service parameter in the setup_wizard_mydlEPSS 2.3%CVE-2020-36856CRITICALNagios XI < 5.6.14 Authenticated RCE command_test.php via addressEPSS 2.3%CVE-2021-23025—On version 15.1.x before 15.1.0.5, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all versions of 12.1.x and 11.6.x, an authenticated rEPSS 2.3%CVE-2026-54795HIGHDell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS CommEPSS 2.3%CVE-2026-21861CRITICALbaserCMS: OS Command Injection Leading to Remote Code Execution (RCE)EPSS 2.3%CVE-2025-59831HIGH`git-comiters` Command Injection vulnerabilityEPSS 2.3%